<div dir="ltr">Have you tried Pcap.Net?<br><a href="http://pcapdotnet.codeplex.com">http://pcapdotnet.codeplex.com</a><br><br>Boaz.<br><br><div class="gmail_quote">On Mon, Apr 12, 2010 at 23:06, pro2c <span dir="ltr"><<a href="mailto:pro2c@litrca.com">pro2c@litrca.com</a>></span> wrote:<br>
<blockquote class="gmail_quote" style="margin: 0pt 0pt 0pt 0.8ex; border-left: 1px solid rgb(204, 204, 204); padding-left: 1ex;">
<div link="blue" vlink="purple" name="Compose message area" lang="SL">
<div>
<p class="MsoNormal"><font color="navy" face="Arial" size="2"><span style="font-size: 10pt; font-family: Arial; color: navy;">No, I didn't write the wrapper. But this
is the only one for .NET 2.0 (sharppcap) </span></font><font color="navy" face="Wingdings" size="2"><span style="font-size: 10pt; font-family: Wingdings; color: navy;">L</span></font><font color="navy" face="Arial" size="2"><span style="font-size: 10pt; font-family: Arial; color: navy;"></span></font></p>
<p class="MsoNormal"><font color="navy" face="Arial" size="2"><span style="font-size: 10pt; font-family: Arial; color: navy;"> </span></font></p>
<div>
<div class="MsoNormal" style="text-align: center;" align="center"><font face="Times New Roman" size="3"><span style="font-size: 12pt;" lang="EN-US">
<hr align="center" width="100%" size="2">
</span></font></div>
<p class="MsoNormal"><b><font face="Tahoma" size="2"><span style="font-size: 10pt; font-family: Tahoma; font-weight: bold;" lang="EN-US">From:</span></font></b><font face="Tahoma" size="2"><span style="font-size: 10pt; font-family: Tahoma;" lang="EN-US">
<a href="mailto:winpcap-users-bounces@winpcap.org" target="_blank">winpcap-users-bounces@winpcap.org</a> [mailto:<a href="mailto:winpcap-users-bounces@winpcap.org" target="_blank">winpcap-users-bounces@winpcap.org</a>] <b><span style="font-weight: bold;">On Behalf Of </span></b>Gianluca Varenni<div>
<div></div><div class="h5"><br>
<b><span style="font-weight: bold;">Sent:</span></b> Monday, April 12, 2010 9:50
PM<br>
<b><span style="font-weight: bold;">To:</span></b> <a href="mailto:winpcap-users@winpcap.org" target="_blank">winpcap-users@winpcap.org</a><br>
<b><span style="font-weight: bold;">Subject:</span></b> Re: [Winpcap-users]
Statistical mode help</div></div></span></font><span lang="EN-US"></span></p>
</div><div><div></div><div class="h5">
<p class="MsoNormal"><font face="Times New Roman" size="3"><span style="font-size: 12pt;"> </span></font></p>
<div>
<p class="MsoNormal"><font face="Calibri" size="3"><span style="font-size: 12pt; font-family: Calibri;">The reason is probably in the .NET wrapper itself, then.
Opening around 100 pcap instances is something that I've never tried, but
it might definitely impact the overall system performance.</span></font></p>
</div>
<div>
<p class="MsoNormal"><font face="Calibri" size="3"><span style="font-size: 12pt; font-family: Calibri;">If you have written the .NET wrapper yourself, I would look
into optimizing its code.</span></font></p>
</div>
<div>
<p class="MsoNormal"><font face="Times New Roman" size="3"><span style="font-size: 12pt;"> </span></font></p>
</div>
<div>
<p class="MsoNormal"><font face="Calibri" size="3"><span style="font-size: 12pt; font-family: Calibri;">Have a nice day</span></font></p>
</div>
<div>
<p class="MsoNormal"><font face="Calibri" size="3"><span style="font-size: 12pt; font-family: Calibri;">GV</span></font></p>
</div>
<div>
<p class="MsoNormal"><font face="Times New Roman" size="3"><span style="font-size: 12pt;"> </span></font></p>
</div>
<div>
<p class="MsoNormal"><font face="Times New Roman" size="3"><span style="font-size: 12pt;"> </span></font></p>
</div>
<div>
<div>
<p class="MsoNormal"><font face="Tahoma" size="2"><span style="font-size: 10pt; font-family: Tahoma;"> </span></font></p>
</div>
<div>
<div>
<p class="MsoNormal" style="background: none repeat scroll 0% 0% whitesmoke;"><b><font face="Tahoma" size="2"><span style="font-size: 10pt; font-family: Tahoma; font-weight: bold;">From:</span></font></b><font face="Tahoma" size="2"><span style="font-size: 10pt; font-family: Tahoma;"> <a href="mailto:pro2c@litrca.com" title="pro2c@litrca.com" target="_blank">pro2c</a> </span></font></p>
</div>
<div>
<p class="MsoNormal" style="background: none repeat scroll 0% 0% whitesmoke;"><b><font face="Tahoma" size="2"><span style="font-size: 10pt; font-family: Tahoma; font-weight: bold;">Sent:</span></font></b><font face="Tahoma" size="2"><span style="font-size: 10pt; font-family: Tahoma;"> Monday,
April 12, 2010 12:40 PM</span></font></p>
</div>
<div>
<p class="MsoNormal" style="background: none repeat scroll 0% 0% whitesmoke;"><b><font face="Tahoma" size="2"><span style="font-size: 10pt; font-family: Tahoma; font-weight: bold;">To:</span></font></b><font face="Tahoma" size="2"><span style="font-size: 10pt; font-family: Tahoma;"> <a href="mailto:winpcap-users@winpcap.org" title="winpcap-users@winpcap.org" target="_blank">winpcap-users@winpcap.org</a>
</span></font></p>
</div>
<div>
<p class="MsoNormal" style="background: none repeat scroll 0% 0% whitesmoke;"><b><font face="Tahoma" size="2"><span style="font-size: 10pt; font-family: Tahoma; font-weight: bold;">Subject:</span></font></b><font face="Tahoma" size="2"><span style="font-size: 10pt; font-family: Tahoma;"> Re:
[Winpcap-users] Statistical mode help</span></font></p>
</div>
</div>
</div>
<div>
<p class="MsoNormal"><font face="Times New Roman" size="3"><span style="font-size: 12pt;"> </span></font></p>
</div>
<p class="MsoNormal"><font color="navy" face="Arial" size="2"><span style="font-size: 10pt; font-family: Arial; color: navy;">I'm doing this in <a href="http://VB.NET" target="_blank">VB.NET</a> 2005 (.NET 2.0)
and with 1,5Mbyte/sec (~3000 packets/sec) the cpu load is very high.</span></font></p>
<p class="MsoNormal"><font color="navy" face="Arial" size="2"><span style="font-size: 10pt; font-family: Arial; color: navy;"> </span></font></p>
<div>
<div class="MsoNormal" style="text-align: center;" align="center"><font face="Times New Roman" size="3"><span style="font-size: 12pt;" lang="EN-US">
<hr align="center" width="100%" size="2">
</span></font></div>
<p class="MsoNormal"><b><font face="Tahoma" size="2"><span style="font-size: 10pt; font-family: Tahoma; font-weight: bold;" lang="EN-US">From:</span></font></b><font face="Tahoma" size="2"><span style="font-size: 10pt; font-family: Tahoma;" lang="EN-US">
<a href="mailto:winpcap-users-bounces@winpcap.org" target="_blank">winpcap-users-bounces@winpcap.org</a>
[mailto:<a href="mailto:winpcap-users-bounces@winpcap.org" target="_blank">winpcap-users-bounces@winpcap.org</a>] <b><span style="font-weight: bold;">On
Behalf Of </span></b>Gianluca Varenni<br>
<b><span style="font-weight: bold;">Sent:</span></b> Monday, April 12, 2010 9:31
PM<br>
<b><span style="font-weight: bold;">To:</span></b> <a href="mailto:winpcap-users@winpcap.org" target="_blank">winpcap-users@winpcap.org</a><br>
<b><span style="font-weight: bold;">Subject:</span></b> Re: [Winpcap-users]
Statistical mode help</span></font><span lang="EN-US"></span></p>
</div>
<p class="MsoNormal"><font face="Times New Roman" size="3"><span style="font-size: 12pt;"> </span></font></p>
<div>
<p class="MsoNormal"><font face="Calibri" size="3"><span style="font-size: 12pt; font-family: Calibri;">Then you should definitely be able to process that amount
of packets with a simple user mode application that sorts the packets by TCP
port.</span></font></p>
</div>
<div>
<p class="MsoNormal"><font face="Times New Roman" size="3"><span style="font-size: 12pt;"> </span></font></p>
</div>
<div>
<p class="MsoNormal"><font face="Calibri" size="3"><span style="font-size: 12pt; font-family: Calibri;">Have a nice day</span></font></p>
</div>
<div>
<p class="MsoNormal"><font face="Calibri" size="3"><span style="font-size: 12pt; font-family: Calibri;">GV</span></font></p>
</div>
<div>
<div>
<p class="MsoNormal"><font face="Tahoma" size="2"><span style="font-size: 10pt; font-family: Tahoma;"> </span></font></p>
</div>
<div>
<div>
<p class="MsoNormal" style="background: none repeat scroll 0% 0% whitesmoke;"><b><font face="Tahoma" size="2"><span style="font-size: 10pt; font-family: Tahoma; font-weight: bold;">From:</span></font></b><font face="Tahoma" size="2"><span style="font-size: 10pt; font-family: Tahoma;"> <a href="mailto:pro2c@litrca.com" title="pro2c@litrca.com" target="_blank">pro2c</a> </span></font></p>
</div>
<div>
<p class="MsoNormal" style="background: none repeat scroll 0% 0% whitesmoke;"><b><font face="Tahoma" size="2"><span style="font-size: 10pt; font-family: Tahoma; font-weight: bold;">Sent:</span></font></b><font face="Tahoma" size="2"><span style="font-size: 10pt; font-family: Tahoma;"> Monday,
April 12, 2010 12:15 PM</span></font></p>
</div>
<div>
<p class="MsoNormal" style="background: none repeat scroll 0% 0% whitesmoke;"><b><font face="Tahoma" size="2"><span style="font-size: 10pt; font-family: Tahoma; font-weight: bold;">To:</span></font></b><font face="Tahoma" size="2"><span style="font-size: 10pt; font-family: Tahoma;"> <a href="mailto:winpcap-users@winpcap.org" title="winpcap-users@winpcap.org" target="_blank">winpcap-users@winpcap.org</a>
</span></font></p>
</div>
<div>
<p class="MsoNormal" style="background: none repeat scroll 0% 0% whitesmoke;"><b><font face="Tahoma" size="2"><span style="font-size: 10pt; font-family: Tahoma; font-weight: bold;">Subject:</span></font></b><font face="Tahoma" size="2"><span style="font-size: 10pt; font-family: Tahoma;"> Re:
[Winpcap-users] Statistical mode help</span></font></p>
</div>
</div>
</div>
<div>
<p class="MsoNormal"><font face="Times New Roman" size="3"><span style="font-size: 12pt;"> </span></font></p>
</div>
<p class="MsoNormal"><font color="navy" face="Arial" size="2"><span style="font-size: 10pt; font-family: Arial; color: navy;">Not much. Traffic of an average
computer... about 15Mbit down and 15 up</span></font></p>
<p class="MsoNormal"><font color="navy" face="Arial" size="2"><span style="font-size: 10pt; font-family: Arial; color: navy;"> </span></font></p>
<div>
<div class="MsoNormal" style="text-align: center;" align="center"><font face="Times New Roman" size="3"><span style="font-size: 12pt;" lang="EN-US">
<hr align="center" width="100%" size="2">
</span></font></div>
<p class="MsoNormal"><b><font face="Tahoma" size="2"><span style="font-size: 10pt; font-family: Tahoma; font-weight: bold;" lang="EN-US">From:</span></font></b><font face="Tahoma" size="2"><span style="font-size: 10pt; font-family: Tahoma;" lang="EN-US">
<a href="mailto:winpcap-users-bounces@winpcap.org" target="_blank">winpcap-users-bounces@winpcap.org</a>
[mailto:<a href="mailto:winpcap-users-bounces@winpcap.org" target="_blank">winpcap-users-bounces@winpcap.org</a>] <b><span style="font-weight: bold;">On
Behalf Of </span></b>Gianluca Varenni<br>
<b><span style="font-weight: bold;">Sent:</span></b> Monday, April 12, 2010 9:02
PM<br>
<b><span style="font-weight: bold;">To:</span></b> <a href="mailto:winpcap-users@winpcap.org" target="_blank">winpcap-users@winpcap.org</a><br>
<b><span style="font-weight: bold;">Subject:</span></b> Re: [Winpcap-users]
Statistical mode help</span></font><span lang="EN-US"></span></p>
</div>
<p class="MsoNormal"><font face="Times New Roman" size="3"><span style="font-size: 12pt;"> </span></font></p>
<div>
<p class="MsoNormal"><font face="Calibri" size="3"><span style="font-size: 12pt; font-family: Calibri;">How much traffic are we talking about? </span></font></p>
</div>
<div>
<p class="MsoNormal"><font face="Times New Roman" size="3"><span style="font-size: 12pt;"> </span></font></p>
</div>
<div>
<p class="MsoNormal"><font face="Calibri" size="3"><span style="font-size: 12pt; font-family: Calibri;">Have a nice day</span></font></p>
</div>
<div>
<p class="MsoNormal"><font face="Calibri" size="3"><span style="font-size: 12pt; font-family: Calibri;">GV</span></font></p>
</div>
<div>
<div>
<p class="MsoNormal"><font face="Tahoma" size="2"><span style="font-size: 10pt; font-family: Tahoma;"> </span></font></p>
</div>
<div>
<div>
<p class="MsoNormal" style="background: none repeat scroll 0% 0% whitesmoke;"><b><font face="Tahoma" size="2"><span style="font-size: 10pt; font-family: Tahoma; font-weight: bold;">From:</span></font></b><font face="Tahoma" size="2"><span style="font-size: 10pt; font-family: Tahoma;"> <a href="mailto:pro2c@litrca.com" title="pro2c@litrca.com" target="_blank">pro2c</a> </span></font></p>
</div>
<div>
<p class="MsoNormal" style="background: none repeat scroll 0% 0% whitesmoke;"><b><font face="Tahoma" size="2"><span style="font-size: 10pt; font-family: Tahoma; font-weight: bold;">Sent:</span></font></b><font face="Tahoma" size="2"><span style="font-size: 10pt; font-family: Tahoma;"> Monday,
April 12, 2010 11:55 AM</span></font></p>
</div>
<div>
<p class="MsoNormal" style="background: none repeat scroll 0% 0% whitesmoke;"><b><font face="Tahoma" size="2"><span style="font-size: 10pt; font-family: Tahoma; font-weight: bold;">To:</span></font></b><font face="Tahoma" size="2"><span style="font-size: 10pt; font-family: Tahoma;"> <a href="mailto:winpcap-users@winpcap.org" title="winpcap-users@winpcap.org" target="_blank">winpcap-users@winpcap.org</a>
</span></font></p>
</div>
<div>
<p class="MsoNormal" style="background: none repeat scroll 0% 0% whitesmoke;"><b><font face="Tahoma" size="2"><span style="font-size: 10pt; font-family: Tahoma; font-weight: bold;">Subject:</span></font></b><font face="Tahoma" size="2"><span style="font-size: 10pt; font-family: Tahoma;"> Re:
[Winpcap-users] Statistical mode help</span></font></p>
</div>
</div>
</div>
<div>
<p class="MsoNormal"><font face="Times New Roman" size="3"><span style="font-size: 12pt;"> </span></font></p>
</div>
<p class="MsoNormal"><font color="navy" face="Arial" size="2"><span style="font-size: 10pt; font-family: Arial; color: navy;">I already did this (capture all packets and
sorted them on their ports) but it was too slow when downloading at full speed.
So I turned to statistics as I only need the bytes up/down per port. </span></font></p>
<p class="MsoNormal"><font color="navy" face="Arial" size="2"><span style="font-size: 10pt; font-family: Arial; color: navy;">There are about 100 active ports on
average, so 100 instances would be neccessary...</span></font></p>
<p class="MsoNormal"><font color="navy" face="Arial" size="2"><span style="font-size: 10pt; font-family: Arial; color: navy;"> </span></font></p>
<div>
<div class="MsoNormal" style="text-align: center;" align="center"><font face="Times New Roman" size="3"><span style="font-size: 12pt;" lang="EN-US">
<hr align="center" width="100%" size="2">
</span></font></div>
<p class="MsoNormal"><b><font face="Tahoma" size="2"><span style="font-size: 10pt; font-family: Tahoma; font-weight: bold;" lang="EN-US">From:</span></font></b><font face="Tahoma" size="2"><span style="font-size: 10pt; font-family: Tahoma;" lang="EN-US">
<a href="mailto:winpcap-users-bounces@winpcap.org" target="_blank">winpcap-users-bounces@winpcap.org</a>
[mailto:<a href="mailto:winpcap-users-bounces@winpcap.org" target="_blank">winpcap-users-bounces@winpcap.org</a>] <b><span style="font-weight: bold;">On
Behalf Of </span></b>Gianluca Varenni<br>
<b><span style="font-weight: bold;">Sent:</span></b> Monday, April 12, 2010 8:50
PM<br>
<b><span style="font-weight: bold;">To:</span></b> <a href="mailto:winpcap-users@winpcap.org" target="_blank">winpcap-users@winpcap.org</a><br>
<b><span style="font-weight: bold;">Subject:</span></b> Re: [Winpcap-users]
Statistical mode help</span></font><span lang="EN-US"></span></p>
</div>
<p class="MsoNormal"><font face="Times New Roman" size="3"><span style="font-size: 12pt;"> </span></font></p>
<div>
<p class="MsoNormal"><font face="Calibri" size="3"><span style="font-size: 12pt; font-family: Calibri;">It depends on the number of instances. For sure I wouldn't
open 64k instances to monitor all the ports. I would capture all the packets
(i.e. no statistics mode) and write my own code to disssect the packets and
compute the statistics.</span></font></p>
</div>
<div>
<p class="MsoNormal"><font face="Times New Roman" size="3"><span style="font-size: 12pt;"> </span></font></p>
</div>
<div>
<p class="MsoNormal"><font face="Calibri" size="3"><span style="font-size: 12pt; font-family: Calibri;">GV</span></font></p>
</div>
<div>
<p class="MsoNormal"><font face="Times New Roman" size="3"><span style="font-size: 12pt;"> </span></font></p>
</div>
<div>
<div>
<p class="MsoNormal"><font face="Tahoma" size="2"><span style="font-size: 10pt; font-family: Tahoma;"> </span></font></p>
</div>
<div>
<div>
<p class="MsoNormal" style="background: none repeat scroll 0% 0% whitesmoke;"><b><font face="Tahoma" size="2"><span style="font-size: 10pt; font-family: Tahoma; font-weight: bold;">From:</span></font></b><font face="Tahoma" size="2"><span style="font-size: 10pt; font-family: Tahoma;"> <a href="mailto:pro2c@litrca.com" title="pro2c@litrca.com" target="_blank">pro2c</a> </span></font></p>
</div>
<div>
<p class="MsoNormal" style="background: none repeat scroll 0% 0% whitesmoke;"><b><font face="Tahoma" size="2"><span style="font-size: 10pt; font-family: Tahoma; font-weight: bold;">Sent:</span></font></b><font face="Tahoma" size="2"><span style="font-size: 10pt; font-family: Tahoma;"> Monday,
April 12, 2010 11:42 AM</span></font></p>
</div>
<div>
<p class="MsoNormal" style="background: none repeat scroll 0% 0% whitesmoke;"><b><font face="Tahoma" size="2"><span style="font-size: 10pt; font-family: Tahoma; font-weight: bold;">To:</span></font></b><font face="Tahoma" size="2"><span style="font-size: 10pt; font-family: Tahoma;"> <a href="mailto:winpcap-users@winpcap.org" title="winpcap-users@winpcap.org" target="_blank">winpcap-users@winpcap.org</a>
</span></font></p>
</div>
<div>
<p class="MsoNormal" style="background: none repeat scroll 0% 0% whitesmoke;"><b><font face="Tahoma" size="2"><span style="font-size: 10pt; font-family: Tahoma; font-weight: bold;">Subject:</span></font></b><font face="Tahoma" size="2"><span style="font-size: 10pt; font-family: Tahoma;"> Re: [Winpcap-users]
Statistical mode help</span></font></p>
</div>
</div>
</div>
<div>
<p class="MsoNormal"><font face="Times New Roman" size="3"><span style="font-size: 12pt;"> </span></font></p>
</div>
<p class="MsoNormal"><font color="navy" face="Arial" size="2"><span style="font-size: 10pt; font-family: Arial; color: navy;">Thank you for your reply!</span></font></p>
<p class="MsoNormal"><font color="navy" face="Arial" size="2"><span style="font-size: 10pt; font-family: Arial; color: navy;"> </span></font></p>
<p class="MsoNormal"><font color="navy" face="Arial" size="2"><span style="font-size: 10pt; font-family: Arial; color: navy;">One more question: are several instances
heavy on the cpu?...can I monitor all the computer's ports without stressing
the cpu too much?</span></font></p>
<p class="MsoNormal"><font color="navy" face="Arial" size="2"><span style="font-size: 10pt; font-family: Arial; color: navy;"> </span></font></p>
<div>
<div class="MsoNormal" style="text-align: center;" align="center"><font face="Times New Roman" size="3"><span style="font-size: 12pt;" lang="EN-US">
<hr align="center" width="100%" size="2">
</span></font></div>
<p class="MsoNormal"><b><font face="Tahoma" size="2"><span style="font-size: 10pt; font-family: Tahoma; font-weight: bold;" lang="EN-US">From:</span></font></b><font face="Tahoma" size="2"><span style="font-size: 10pt; font-family: Tahoma;" lang="EN-US">
<a href="mailto:winpcap-users-bounces@winpcap.org" target="_blank">winpcap-users-bounces@winpcap.org</a>
[mailto:<a href="mailto:winpcap-users-bounces@winpcap.org" target="_blank">winpcap-users-bounces@winpcap.org</a>] <b><span style="font-weight: bold;">On
Behalf Of </span></b>Gianluca Varenni<br>
<b><span style="font-weight: bold;">Sent:</span></b> Monday, April 12, 2010 8:37
PM<br>
<b><span style="font-weight: bold;">To:</span></b> <a href="mailto:winpcap-users@winpcap.org" target="_blank">winpcap-users@winpcap.org</a><br>
<b><span style="font-weight: bold;">Subject:</span></b> Re: [Winpcap-users]
Statistical mode help</span></font><span lang="EN-US"></span></p>
</div>
<p class="MsoNormal"><font face="Times New Roman" size="3"><span style="font-size: 12pt;"> </span></font></p>
<div>
<p class="MsoNormal"><font face="Calibri" size="3"><span style="font-size: 12pt; font-family: Calibri;">you need to use several instances.</span></font></p>
</div>
<div>
<p class="MsoNormal"><font face="Times New Roman" size="3"><span style="font-size: 12pt;"> </span></font></p>
</div>
<div>
<p class="MsoNormal"><font face="Calibri" size="3"><span style="font-size: 12pt; font-family: Calibri;">Have a nice day</span></font></p>
</div>
<div>
<p class="MsoNormal"><font face="Calibri" size="3"><span style="font-size: 12pt; font-family: Calibri;">GV</span></font></p>
</div>
<div>
<div>
<p class="MsoNormal"><font face="Tahoma" size="2"><span style="font-size: 10pt; font-family: Tahoma;"> </span></font></p>
</div>
<div>
<div>
<p class="MsoNormal" style="background: none repeat scroll 0% 0% whitesmoke;"><b><font face="Tahoma" size="2"><span style="font-size: 10pt; font-family: Tahoma; font-weight: bold;">From:</span></font></b><font face="Tahoma" size="2"><span style="font-size: 10pt; font-family: Tahoma;"> <a href="mailto:pro2c@litrca.com" title="pro2c@litrca.com" target="_blank">pro2c</a> </span></font></p>
</div>
<div>
<p class="MsoNormal" style="background: none repeat scroll 0% 0% whitesmoke;"><b><font face="Tahoma" size="2"><span style="font-size: 10pt; font-family: Tahoma; font-weight: bold;">Sent:</span></font></b><font face="Tahoma" size="2"><span style="font-size: 10pt; font-family: Tahoma;"> Monday,
April 12, 2010 11:24 AM</span></font></p>
</div>
<div>
<p class="MsoNormal" style="background: none repeat scroll 0% 0% whitesmoke;"><b><font face="Tahoma" size="2"><span style="font-size: 10pt; font-family: Tahoma; font-weight: bold;">To:</span></font></b><font face="Tahoma" size="2"><span style="font-size: 10pt; font-family: Tahoma;"> <a href="mailto:winpcap-users@winpcap.org" title="winpcap-users@winpcap.org" target="_blank">winpcap-users@winpcap.org</a>
</span></font></p>
</div>
<div>
<p class="MsoNormal" style="background: none repeat scroll 0% 0% whitesmoke;"><b><font face="Tahoma" size="2"><span style="font-size: 10pt; font-family: Tahoma; font-weight: bold;">Subject:</span></font></b><font face="Tahoma" size="2"><span style="font-size: 10pt; font-family: Tahoma;">
[Winpcap-users] Statistical mode help</span></font></p>
</div>
</div>
</div>
<div>
<p class="MsoNormal"><font face="Times New Roman" size="3"><span style="font-size: 12pt;"> </span></font></p>
</div>
<p class="MsoNormal"><font face="Arial" size="2"><span style="font-size: 10pt; font-family: Arial;">Hello</span></font></p>
<p class="MsoNormal"><font face="Arial" size="2"><span style="font-size: 10pt; font-family: Arial;"> </span></font></p>
<p class="MsoNormal"><font face="Arial" size="2"><span style="font-size: 10pt; font-family: Arial;">I've set the stats filter to monitor several tcp ports. I
recieve only the data for all these ports together and I wish to be able to get
the individual data for each port. Is this possible with 1 instance or do I
have to create one instance of winpcap for every port?</span></font></p>
<p class="MsoNormal"><font face="Arial" size="2"><span style="font-size: 10pt; font-family: Arial;"> </span></font></p>
<p class="MsoNormal"><font face="Arial" size="2"><span style="font-size: 10pt; font-family: Arial;">Thanx</span></font></p>
<p class="MsoNormal"><font face="Arial" size="2"><span style="font-size: 10pt; font-family: Arial;">Michael</span></font></p>
<div class="MsoNormal" style="text-align: center;" align="center"><font face="Times New Roman" size="3"><span style="font-size: 12pt;">
<hr align="center" width="100%" size="2">
</span></font></div>
<p class="MsoNormal"><font face="Times New Roman" size="3"><span style="font-size: 12pt;">_______________________________________________<br>
Winpcap-users mailing list<br>
<a href="mailto:Winpcap-users@winpcap.org" target="_blank">Winpcap-users@winpcap.org</a><br>
<a href="https://www.winpcap.org/mailman/listinfo/winpcap-users" target="_blank">https://www.winpcap.org/mailman/listinfo/winpcap-users</a></span></font></p>
<div class="MsoNormal" style="text-align: center;" align="center"><font face="Times New Roman" size="3"><span style="font-size: 12pt;">
<hr align="center" width="100%" size="2">
</span></font></div>
<p class="MsoNormal"><font face="Times New Roman" size="3"><span style="font-size: 12pt;">_______________________________________________<br>
Winpcap-users mailing list<br>
<a href="mailto:Winpcap-users@winpcap.org" target="_blank">Winpcap-users@winpcap.org</a><br>
<a href="https://www.winpcap.org/mailman/listinfo/winpcap-users" target="_blank">https://www.winpcap.org/mailman/listinfo/winpcap-users</a></span></font></p>
<div class="MsoNormal" style="text-align: center;" align="center"><font face="Times New Roman" size="3"><span style="font-size: 12pt;">
<hr align="center" width="100%" size="2">
</span></font></div>
<p class="MsoNormal"><font face="Times New Roman" size="3"><span style="font-size: 12pt;">_______________________________________________<br>
Winpcap-users mailing list<br>
<a href="mailto:Winpcap-users@winpcap.org" target="_blank">Winpcap-users@winpcap.org</a><br>
<a href="https://www.winpcap.org/mailman/listinfo/winpcap-users" target="_blank">https://www.winpcap.org/mailman/listinfo/winpcap-users</a></span></font></p>
<div class="MsoNormal" style="text-align: center;" align="center"><font face="Times New Roman" size="3"><span style="font-size: 12pt;">
<hr align="center" width="100%" size="2">
</span></font></div>
<p class="MsoNormal"><font face="Times New Roman" size="3"><span style="font-size: 12pt;">_______________________________________________<br>
Winpcap-users mailing list<br>
<a href="mailto:Winpcap-users@winpcap.org" target="_blank">Winpcap-users@winpcap.org</a><br>
<a href="https://www.winpcap.org/mailman/listinfo/winpcap-users" target="_blank">https://www.winpcap.org/mailman/listinfo/winpcap-users</a></span></font></p>
<div class="MsoNormal" style="text-align: center;" align="center"><font face="Times New Roman" size="3"><span style="font-size: 12pt;">
<hr align="center" width="100%" size="2">
</span></font></div>
<p class="MsoNormal"><font face="Times New Roman" size="3"><span style="font-size: 12pt;">_______________________________________________<br>
Winpcap-users mailing list<br>
<a href="mailto:Winpcap-users@winpcap.org" target="_blank">Winpcap-users@winpcap.org</a><br>
<a href="https://www.winpcap.org/mailman/listinfo/winpcap-users" target="_blank">https://www.winpcap.org/mailman/listinfo/winpcap-users</a></span></font></p>
</div></div></div>
</div>
<br>_______________________________________________<br>
Winpcap-users mailing list<br>
<a href="mailto:Winpcap-users@winpcap.org">Winpcap-users@winpcap.org</a><br>
<a href="https://www.winpcap.org/mailman/listinfo/winpcap-users" target="_blank">https://www.winpcap.org/mailman/listinfo/winpcap-users</a><br>
<br></blockquote></div><br></div>